Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
22-11-2023 16:08
Static task
static1
Behavioral task
behavioral1
Sample
030609f0bad74465cb2c68b26135480513c882cc72ed44a36b50ddc5d97243a8.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
030609f0bad74465cb2c68b26135480513c882cc72ed44a36b50ddc5d97243a8.exe
Resource
win10v2004-20231025-en
General
-
Target
030609f0bad74465cb2c68b26135480513c882cc72ed44a36b50ddc5d97243a8.exe
-
Size
1.1MB
-
MD5
140349d8cf511209621e642ff212ce73
-
SHA1
10fb639e5b78168b7a83b25221170b8884604040
-
SHA256
030609f0bad74465cb2c68b26135480513c882cc72ed44a36b50ddc5d97243a8
-
SHA512
24eaa63a4f6f1099f3545d5ad030d060c1a0c4921971dc935fd41f489b0b2e12c35f004ca9757e739d318d49b9be2bbe5c57af31990c42bc90fa41d0c763d2fd
-
SSDEEP
24576:oKohQZ8KzZ47EdMQMU+uTFQmP+WlGRuXJaPIwV6o3zpSJcJnu64E7:4+GKzZpdH+eFQmgyJ7Xoe/E
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1748 3496 WerFault.exe 25
Processes
-
C:\Users\Admin\AppData\Local\Temp\030609f0bad74465cb2c68b26135480513c882cc72ed44a36b50ddc5d97243a8.exe"C:\Users\Admin\AppData\Local\Temp\030609f0bad74465cb2c68b26135480513c882cc72ed44a36b50ddc5d97243a8.exe"1⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 4882⤵
- Program crash
PID:1748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3496 -ip 34961⤵PID:3848